Attacks on AFS

Anderson Johnston andy at umbc.edu
Thu Jun 6 15:02:46 GMT 2002


We've gotten a notice that AFS servers have been crashed at some sites by
a scan of port 7001 followed by "malicious packets".  The attacking
packets have source IP 130.237.48.109 (sul.e.kth.se).

Does anyone know anything about this?  Particularly about the nature of
the "mailcious packet"?

						Thanks,
						- Andy Johnston

------------------------------------------------------------------------------
** Andy Johnston (andy at umbc.edu)          *            pager: 410-678-8949  **
** Manager of IT Security                 * PGP key:(afj2002) 4096/8448B056 **
** Office of Information Technology, UMBC *   4A B4 96 64 D9 B6 EF E3 21 9A **
** 410-455-2583 (v)/410-455-1065 (f)      *   46 1A 37 11 F5 6C 84 48 B0 56 **
------------------------------------------------------------------------------




More information about the unisog mailing list